FMC Version 7.3.1 (build 19) Syslog Page

[Bobby M]

So - I'm trying to find the changes my team did last night (non-prod environment) and I thought I could head to the syslog (Gear in top right ->Monitor->Syslog

Now as expected I'm seeing tons of logs from this morning. I was hoping to skip like 15 pages by manually entering a number in but it just reloads the current page is. Are you all getting similar experiences? It seems like I can only scan through one page at a time or use the search function which is a bit cumbersome.

If I use the search terms - copying and pasting the date, I get 0 returned hits.  I'm not sure if this is because I'm limited to Edge or if it's just a poor user experience in general.

[Ruben Cocheno]

@Bobby M 

Let me know if it helps

---

Step 1

Choose System > Monitoring > Syslog.

Step 2

To search for specific message content in the system log: Enter a word or query in the filter field as described in Syntax for System Log Filters. Only Grep-compatible search syntax is supported. Examples: To search for all log entries that contain the user name “Admin,” use Admin. To search for all log entries that are generated on November 27, use Nov[[:space:]]*27 or Nov.*27 (but not Nov 27 or Nov*27 ). To search for all log entries that contain authorization debugging information on November 5, use Nov[[:space:]]*5.*AUTH.*DEBUG. To make your search case-sensitive, select Case-sensitive. (By default, filters are not case-sensitive.) To search for all system log messages that do not meet the criteria you entered, select Exclusion. Click Go.

[Eric R. Jones]

I tried using the steps you put in here but the ones that are date related didn't work. I used Admin and Feb which returned results as it's Feb and the name Admin has been used; however, any other combination, e.g. Feb 05, Feb.*05,Fed.*5 or the entire date 05 2024 have all returned nothing. Using "*" returns all the data but I only see Feb not previous months. Could that be related to the face we use syslog servers and not local storage for our logs?

[Bobby M]

@Ruben Cocheno Hi, sure the regex works. Are you able to jump to pages without using the arrows at the bottom right?

Like, if you are on page 1- can you type in page 30 and jump to it? Mine does not.

[Marius Gunnerud]

Yup, this looks to be a bug.  I am running 7.2.4 and I am able to move through using the arrows but as soon as I try jumping to page 25, for example, it just reloads the page.

[Ruben Cocheno]

@Bobby M 

I currently don't have access to a box with it, but if the URL has a number maybe try to play with the URL, otherwise i guess you need to go one by one